Changeset 24457

Timestamp:

06/21/2013 01:21:12 AM (7 years ago)

Author:

nacin

Message:

Add strict check to phpass's CheckPassword() method to avoid issues when the method is improperly called.

File:

• trunk/wp-includes/class-phpass.php (modified) (1 diff)

trunk/wp-includes/class-phpass.php

@@ -254 +254 @@
             $hash = crypt($password, $stored_hash);
 
-        return $hash == $stored_hash;
+        return $hash === $stored_hash;
     }
 }